Text this: The spin model checker :